Microsoft Dynamics 365
Review the minimum OAuth scopes for every Dynamics 365 action.
Review the minimum standard delegated scope mapping for every Microsoft Dynamics 365 action. Dataverse has no thinner OAuth sibling than user_impersonation on the organization URL. Table-level access is a Dataverse security role, not an OAuth scope. Sites.Selected does not apply.
Minimal scopes per action
Action Description Minimum scopes
Close opportunity as lost Closes a Sales opportunity as lost. {organization-url}/user\_impersonation
Close opportunity as won Closes a Sales opportunity as won. {organization-url}/user\_impersonation
Create record Creates a Dataverse record. {organization-url}/user\_impersonation
Delete record Deletes a Dataverse record. {organization-url}/user\_impersonation
Describe table Describes a Dataverse table and its columns. {organization-url}/user\_impersonation
Disqualify lead Disqualifies a Sales lead. {organization-url}/user\_impersonation
Get record Gets a Dataverse record by ID. {organization-url}/user\_impersonation
List records Lists records from a Dataverse table. {organization-url}/user\_impersonation
List tables Lists Dataverse tables in the environment. {organization-url}/user\_impersonation
Qualify lead Qualifies a Sales lead. {organization-url}/user\_impersonation
Recalculate opportunity Recalculates a Sales opportunity. {organization-url}/user\_impersonation
Update record Updates a Dataverse record. {organization-url}/user\_impersonation